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METHOD AND APPARATUS FOR PROVIDING AUTHENTICATED, SECURE ON- 
LINE COMMUNICATION BETWEEN REMOTE LOCATIONS 

Field of the Invention 

The present invention relates generally to secure communications systems, and more 
particularly, to a method and apparatus for authenticating and securely communicating, in 
addition to transactional data, user location data and event time data relating to a computer-based 
transaction executed using an electronic communication mediimi interconnecting a remotely 
located player (client) and a casino (host server). 

BACKGROUND OF THE INVENTION 

Many on-line transactions that are completed using a computer require knowledge of the 
purchaser's actual location, identit>' and time, such as, for example, the purchase of controlled 
materials, cash transfer transactions, etc. Heretofore, in order to accommodate such transactions 
between remote locations, dedicated telephone lines or other secure commtmications systems 
have been required. However, as the Internet becomes the media of choice for many 
commtmications and commercial transactions, use of the Internet for transactions in which 
location, time and identity of the parties are required becomes problematic since prior to the 
present invention there was no way that the parties could be assured of the actual input lime of 
the communication and the location of the other party. 

One type of transaction for which the Internet appears panicularly attractive is on-line 
gambling. However, gambling is a regulated industry all over the world. The regulations vary 
from total prohibition to nearly complete permissive wagering on almost imiimited subject 
matter. Today it is clear who has jurisdiction for both tlie establishment of regulations and their 
enforcement. In the USA, for example, the states have the authorit)', and the federal government 
supports the state's authority, to regulate gambling within its borders. 

Some form of gambling is legal in all but two states; Utah and Hawaii. Currently, thirty- 
seven states permit state-sanctioned lotteries and twenty-three states have casinos, while others 
like California license card parlors. Seven states allow off-track paramutual betting on horse 
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racing over the telephone. These activities are governed bv a G«rr,h. • 

. _ Je„.c:r : :;~:r::::r 

games and busm=sse.pennitt=d.o offer games in a,eir.,att ""8 Piayers, 

Of *e d-en-cun™, „gu.a.o„s. T^e Conm^ssion ..nn,ed an e„do« o ^ 
sovereignty as to the issue. The few evnl,v,> 

ine rew exphcit exceptions were for eamfalino i a- 
reservations, on cross-boundary waterways .nH . ^ "'^^ 
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Of iUega, gan-BUng b« ,S U.S.C Sec^ , Tr 
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b..„„H . regulation of gamblinE 

eyond a county s geopoii^ea, bo^dartes. To avoid conflict wid, U,e iaws of a pan, ^ 

^o^ry. cnnse ships d,a. aUow gambling are eare&i .o be in in.e„a,io„a, „a,ers be oT ^ 

' '"'"^K play. Jurisdiction is tlius generally clear * 

„k • generaJly clear and there are usually few conflicts The 

obv,ous confhcs have been covered domestically by federal laws 

It is important to note the importance of identifying bod, where the gambling occurs and 
who the panics (die host casino and the Dlaverl m- ""ng occurs and 

both the iecalitv of a,. k,- ' " 

enforcl , 1 f ^ «n and 

et^orcement. Thts ,s of pamcular concern relative to remote gambling »ansactions made usmg 

a commumcanon medium such as *e Intemet because one cannot ^™vs know where oZ 
ce„^ayer,andthehos.server,us^l,.,^ 

not hard^re connected from one end ofthe link to d,e other. 

Today a player usually goes into a casino and walks around placing bets and olavin- 
.n su^oun^ngs that have evolved over many years. He knows „he.' ^ 

oTj; ""^ " ' ^ - Of conftdence 2 

exposure ofthe transactions within the lunitsofthe law are m,der control R„,h . 

what it means to wm and how the ™nner is to collec, b' 

i^i'^ wuuicr IS 10 collect his winnines P\/f>i^rtu;^r. ^ 

cash, to knowledge of whether he wins or loses is acceotabr t- . *" 
^ , . ' ^'^ceptabiy within the party's control or 

doesn t Play. It is therefore apparent that the security that physical presen lo 1 

versus electronically accommodated remote ^.mhr 

oated remote gamblmg, supported by bets delivered through 
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electronic funds transfer, is going to require an adjustment in thinking for both the individuaJ 
gambler and the casino. 

There are currently several individual websites which offer the opponunity to gamble on 
sports activities, various types of on-line games, and various types of lotteries. Payment for 
5 wins and losses are accommodated through use of deposit account and credit card transactions. 
The proprietors of such websites have taken the position that the gambling "transaction" occurs 
at the website, and so long as the "transaction" occurs within a jurisdiction where gambling is 
legal, the wagering, in their view, is legal. However, various state authorities have now taken 
contrary positions and it doesn't make any difference where the player is extant. In fact, during 
10 the past several years, several states have challenged such practices and legal battles in this 
regard persist. 

In the world of the Internet, it is easy to disguise where the website computer executing 
an application, in this case gaming software, is located, and where the user, i.e., the player 
sending the transaction to the application, can be found. This means that one can "spoof the 

1 5 computer at the gambling website into thinking that the remote player is in a venue where it is 
legal to play the game. Likewise, a website computer connected to the Internet can appear to be 
executing a game in a location where it is legal, while it is actually located in a jurisdiction 
wherein such gambling is illegal. In either case, both parties to the transaction may be subject to 
legal liability if one of them is a resident in a jtuisdiction where cross boundary gambling is not 

20 legal. Furthermore, in use of a communications medium that is subject to transmission delays, it 
is possible to change the apparent time of day of the player input to the extent that one could 
make a play after the legal period for wagering has expired, and yet appear to have entered his 
bet within the legal time window. This of course makes such play ripe for fraudulent 
opportunits'. There is presently no facility on the Intemet to preclude such actions. The Internet 

25 is presently tised in iiuiumerable non-wagering transactions; thus, any solution that is developed 
and used in the future must not be perceived as compromising in any way the fundamental 
assumed rights of the general Intemet community. 

Remote commimication problems, in addition to party location and time of transactional 
activities that will require solutions in the gambling industry, be it through use of the Intemet or 

30 any other commimications meditmi, are authentication (identification) of both the casino and the 
player, privacy of the results of the transaction, security for the games to preclude tampering, 
and protection against unauthorized access to a player's financial accoimts. Although some 
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communications links, such as hardwire connections between remote terminals, are more or less 
secure, the Internet, in its current implementation, is not designed to be restrictive in any way; in 
fact, quite the opposite is true. It is probably the least restrictive communications medium in the 
world. It is also true that any action that may attempt to restrict a user's freedom on the Internet 
5 is met with massive resistance. Therefore, a solution to identifying the name and location of a 
player, and the name and location of the casino, as well as the security of the communications 
between them, must be carefully constrained to apply only to those who want or need to use it. 

n\ " It will thus be appreciated that although licensing and taxing is normally done by local or 

state governments, and regulation is normally enacted at state and federal levels in the U.S., and 

""*r. 1 0 at the-nation's state level internationally, the application of regulations is geopolitical. And such 

t regulations typically apply to the casino, the player and the type of game. To enforce the 

regulations, it is thus axiomatic that the physical location of both the player and the gaming 
establishment must be known. Furthermore, transactional legitimacy also requires the 
establishment of both the time and date of each transaction as well. 

£ 15 

SUMMARY OF THE INVENTION 

It is therefore a principal objective of the present invention to provide a transactional 
method and apparams having means for determining the location of each party to a remotely 
linked transaction, 

20 Another objective is to provide a system of the type described having means for 

determining the time of a transaction conducted between remote sites using an unsecured 
communication medium such as the Internet. 
V / -^Still another objective of the present invention is to provide a system of the type 

described in which all communications between a remote player and a gaming site can be 

25 securely conducted. 

Briefly, a presently preferred embodiment of the present invention includes the provision 
of a user terminal adapted to enable a player in one location to remotely communicate via a 
communications medium such as the Internet with a gaming host in another location. Location 
of the remote user terminal, the host server and universal time are determined using means for 

30 accessing the global positioning satellite (GPS) system. Player authentication (identity 
verification) is determined by use of a personal identification number (PIN) and electronic 
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signature verification service. Security of communication is accomplished through oise of a 
public/private key encryption system. 

The remote user terminal may be comprised of one or more discreet components adapted 
to be used with a laptop or desktop personal computer (PC), or may be embodied in a stand 
5 alone or self-contained single unit that is portable and commimicates via radio waves, telephone 
lines or the Intemet to a host server. 

An important advantage of the present invention is that it allows remote users to legally 
gamble at legal casino sites using an unsecured commimications mediimi such as the Intemet as 
the connecting medium. 

10 Another advantage of the present invention is that it facilitates denial of gambling or 

other transactional privileges to those who are resident at locations or in jimsdictions that would 

make such transactions illegal. 

Still another advantage of the present invention is that it assures that the time a wager is 

placed, or other action taken, is accurately determined and recorded. 
15 A still further advantage of this present invention is that it assures security in the 

transaction. 

These and other objects and advantages of the present invention will no doubt become 
apparent to those skilled in the art after having read the following detailed description of the 
preferred embodiment illustrated in the several figures of the drawings, 

20 

IN THE DRAWINGS 

Fig. 1 is a block diagram schematically illustrating the principal functional components 
of a basic remote terminal in accordance with a first embodiment of the present invention linking 
25 a remote player to a gambling site via an unsecured channel such as the Intemet; 

Fig. 2 is a block diagram generally illustrating a gaming host system in accordance with 
the present invention; 

Fig. 3 is a high level flow chart generally illustrating the sign-on operation of the remote 
user terminal of Fig. 1 ; 

30 Fig. 4 is a high level flow chart generally illustrating the basic remote user authentication 

process as implemented at the gaming server site of Fig. 2; 
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Fig. 5 is a simplified block diagram illusttaeing a uma,y dedicaBd „„■ 
device in acc.da„..,aseco„de„.odime„.„r*ei„v.«o„t j^:: :r"^^ 

^ ce..a.M.d.^,.e„..me„.„.p:e:r^^^^^^^^^ 
F.gs. 7a.7c i. a flowchar. i,,„s^,i„, o^„«„„ ^^^^^^ ' 

70. and '^^ •» ^ow^Han P,^^ 

0 

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS 

Refemng now ,o F,g. 1 „f 4e drawing, a basic remote communicaaon , 

- --on is i.,.„a.ed a. io and ::Z : ZZT 1 

■ computer \ 1 having a keyboard and/or joystick 12 • , , 

-ans orproviding com.ecUon to a casiXe " •^"^ " 

fte Internet, and a CD-ROM 17 ,„ .7 <^<»™un.ea.,ons network 16 such as 

" KOM 17. In this particular example CD-ROM n 
«rver public key and softwar.. and software relating ,„ ' 

-.ertobedisplayedonthePCmonltortlnTr ""^ T """^ 

PC 1 1 via a serial cah, , o ■ ' "^'^ ~""«'e" «> *e 

encpiiorairit i:;::" °" '^^-'^ -'-^^ ^ 

Receiver .0 .so includes an ante! ::ra " r°""'^ "^^^^^^^ 

number. Receiver 20 communicates with a sl^rl "^^ " "^^^ " 

;r::::::::t!:::r:" • - --=':rur: 
~ to .d.o ^:r:r:::rr: :r^^^^^^^ 

orous. ihe orbit planes are unifonnJv incIineH tn 
Posi.iono,anysa.e,l..eispreciselyJo:ran:::::;~ 

.e.uri:r !:::s::::r ^^^^^^^^ r - - - - 

the receiver Furthermore . I ^ "^io visibility zone of 

iver. ^"rthermore, pseudo-distance measurements allow H... ■ • . 
.tae scale shift relative to the universe coordinated 1 t 

ainated time. Although not necessarily relevant to 
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the present invention, additional measurements of the radial pseudo-speed (the rate of pseudo- 
distance variation) also allows determination of the speed of movement of a user carrying the 
receiver. 

All satellites of the Navstar system transmit a radio navigation pseudo-noise signal with 
5 the same carrier frequency f(c) = 1572.42MHz. Identification of each satellite in the system is 
by the individual ranging pseudorandom sequence assigned to the satellite and modulating the 
carrier. In one mode, termed the easily detected (C/A) signal mode, the pseudorandom sequence 
is designated the Gold Code with a code element transmission rate of 1 .023 MHz, and each code 
sequence comprising 1023 elements so that the repetition of the sequence is one millisecond. 

10 Along with the Gold Code sequence each satellite of the Navstar system transmits binary 

symbols at a fifty baud rate. These symbols carry information on the satellite's ephemerides and 
clock (navigation data necessary to calculate the receiver's position fix), and a synchronization 
code (preamble) marking the reference points of the navigation data. The preamble is repeated 
ever>' six seconds in the form of an eight-symbol Barker code. The serially Uransmitted preamble 

1 5 and navigation data constitute a navigation message composed of lines of six second length. 

The radio navigation signal generation and transmitting subsystem on board the Navstar 
system satellites comprises a high precision time and frequency standard, a carrier frequency 
generator, a Gold Coded pseudorandom sequencer (individual for each satellite), a navigation 
data generator, a synchronization code generator, a modulatmg signal generator to provide two 

20 positional (zero degrees minus 180 degrees) phase modulation of the carrier frequency (this 
modulating signal being a modulus 2 sum of the navigation message symbols), and 
pseudorandom sequence elements, and a transmitter. 

In receiver 20 the arriving radio navigation signal is correlated to a reference signal. The 
heterodyne frequency of the reference signal is fixed relative to signals received from all 

25 satellites of the Navstar system, and the generated copy of the Gold coded sequence varies in 
accordance with a particular satellite signal being received. The correlation between the Gold 
Coded sequence and its copy is analyzed until the auto correlation function obtains its maximum 
(auto correlation peak), this evidencing synchronism between the Gold Coded sequence and its 
copy. On obtaining this synchronism, as well as the synchronization of the carrier frequency 

30 phase, the pseudo-distance (and the pseudo-speed if used) is measured and the navigation 
message is received. 
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copy generator, a carrier frequency detector .nH . 

0 navigation data Cs.a„ of fte „av.,at,o„ « 1 . '^^^ 

.~„.of.e.e.o.di...;:^^^^^^^ 
.he s,gnals a^ving fro™ four satellites al W J 

users PIN number is encrypted bv the Rqa data along with the 

coupled into an input portTpc H ~ """" ^» 

During operation ofthe system illustrated in FiB 1 where,!,.. , • 

•erminal. PC 1 1 ™a aUow a user to select a .ame " " ' 

lu select a game resident on CD-ROM 1 7 or.^ 

hereof on Ute monttor seen 1 , using the .eyboar.,oysticlc unit U for 1^ „" 

.osamep,ay,co,nmunicatio„mustbeflr3.es,ablishedwitbthecasi„.!:::: "^^^^^ 

" As indicated generally in the block diasram of Pi. o • •. 
a. and-operatively associated wi* .J^Z, '' ^ '"^^"^ 

be used to communicate universal 1 11 ^ " 

universaj time and position information back to the re«,«. 

positive y identifv anH «,r,^u • ^ ^® remote user to 

.o the system des..d in rpltl. t:-' -^-^ 
memory 36 containing .v.t.^ • '"-t-^.^Bt), a CD ROM or other unalterable 

programs, system Z^rT^^^ ^^'^ -'^^ — 
38, a host server private ,cey Ttl " • " "^'^^"^ "^"^ 

subsystem coupled .o f T- " ^ ^ " ~« 

.he teem., for facl.tatmg commumcatton with a piurali^ of remote 
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users. Alternatively, or additionally, the system 15 may also include means such as the 
transmitter/receiver 48 for communicating with the remote units via other media. 

It may also be desirable to authenticate the operating system and game software resident 
in the server and each terminal using a method such as that disclosed in U.S. Patent No. 
5 5,643,086, expressly incorporated herein by reference. 

As indicated in the flow diagram of Fig. 3, in accordance with this basis system, the user 
PC 1 1 will first establish communication with the casino server 15 via the modem or network 
connection 14 and Internet 16. It will thereafter obtain time and position information in terms of 
a latitude and longitude signal from receiver 20, and will instruct the user to key in his PIN 
10 number. The PIN number, position information, and time will then be encrypted using a suitable 
encr>TDtion system, such as the RSA public-key/private-key crypto system and be sent to the 
server 15 via the Internet or other suitable communications link. 

As indicated in Fig. 4, the server will subsequently receive the packet of information 
from the remote user, retrieve the user's public key from a public key database, decrypt the 
1 5 packet and determme whether or not the decrypted mformation identifies a valid user. If not, it 
returns a "not authorized to play" signal to the remote user. On the other hand, if it is 
determined that the user is valid, the server next determines from the latitude and longitude 
information received from the remote user whether or not the user is at a valid location. If the 
indicated location is not valid, i.e., it is in perhaps another county, or another state, or another 
20 country in which gaming is not permitted, the system returns a "not authorized to play" signal. 
If the location is determined to be valid, the transmitted time signal is tested for validity and if it 
is not a valid time, the "not authorized to play" signal is returned. However, if the time is valid, 
then an "authorized to play" signal is retumed to the remote unit and play is allowed to 
commence. As part of this initial "handshaking" operation, the server may also take other steps 
25 to qualify the remote user, such as for example, checking to see that the user's previously opened 
account is in order and that the user has an adequate credit balance or the like. 

In a public-key/private-key crypto system each member of the system has two keys, a 
public key and a private key. The public keys are available to all members of the system, but the 
private keys are known only to their owners. Both of these keys are usually integer digital 
30 numbers that are nearly impossible to guess, to compute or to determine one from the other. 
They are typically ver>- large integers of approximately 100 digits. Despite their enormous sizes, 
they can be easily created using well known methods. The principle concept enabling the use of 



9 



wo 98/30297 



PCT/US98/00309 



these ''digital signatures" is the extreme difficulty of factoring the product of two lar-ge prime 
numbers. Although there exist algorithms than can output the prime factors of any input series 
of numbers, if the primes in the factorization are two one-hundred digit integers, then even the 
best algorithm, run on the fastest computer of today's technology takes an extraordinarily long 
period of time. On the other hand, finding such arbitrary prime numbers and using them in the 
creation of the keys is quite easy and can be done in a matter of minutes. Thus even though the 
creation of the private key and public key is not a time consuming process, determination of the 
private key from the public key is a very difficult and time consuming task. In using 

publiC'key/private-key encryption systems, a sender can use his private key as his digital 
signature. Since this private key is known only to him and need not be shared, a forgery of the 
signature is not possible using today's algorithms. 

On the other side of the communication link, the receiving server can confirm the 
authorship of a message by using the public key of the sender to decrypt the message. Thus, the 
public key provides an accurate authentication of the sender. Furthermore, by encrypting the 
transmitted message with the receiver's public key, the sender prevents third party intruders 
from obtaining the message in plain text form. Although the intruders may know the public key 
of the sender, they still need the private key of the intended receiver in order to decr>'pt the 
intercepted message. Hence, as long as the private key is private to the receiver, an intercepted 
message cannot be interpreted by an intruder. 

Accordingly, in this simple embodiment of the present invention, once the 
communication link has been established and authenticated, and the user is authorized to play a 
game (or engage in some other transaction), he can immediately conmience play by making an 
appropriate input via keyboard/joystick 12. In the case of a slot-machine type game, such input 
might be representative of the actuation of a "play" button, or the pull of a slot-machine handle. 
In response thereto, PC 11 will display on its monitor 18 a representation of the game bemg 
played and communicate the player input to the server 15. The server will in turn energize a 
random number generator, determine a game output, and communicate the output back to the PC 
which in turn selects an appropriate game ending routine and displays a corresponding result. In 
the case of a win, the casino server v^U have credited the player's account with the winning 
amount after having initially decremented the player's account by the amount originally 
wagered. The game can be continuously played in this manner with all commimications being 
encrypted and decrypted at both ends of the communications channel, and with the ultimate 
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result being that even though the Internet channel is an unsecured channel, the encryption 
renders the transactional commiuiication secure. 

An alternative version of the present invention is embodied in a "set-top box" 
configuration as depicted at 48 in Fig. 5 and includes a game player module 50 and associate 
CD-ROM drive 51, specifically adapted for use with a conventional home video receiver. In this 
embodiment, the public-key/private-key secure loader 52 is embodied in one or more IC chips 
directly associated with, or perhaps made an integral part of the GPS module 54. or other time 
and position signal generator, so that the encryption function is applied to the time and position 
data before it otherwise enters the gaming module. This further militates against tampering with 
the security features of the system. Player input to this unit is through a handheld remote control 
unit (not shown) that includes an infrared transmitter which generates infrared control signals 
that are coupled to the unit through an infrared receiver port 56 or the like. 

Referring now to Fig. 6 of the drawing, an alternative embodiment of the present 
invention in unitary form and incorporating functional elements corresponding to the essential 
components of the assembly 10 of Fig. 1 is illustrated at 1 10. As depicted, the unit 1 10 includes 
a microprocessor 111 having an input keypad 112, a transmitter/receiver 114, an unalterable 
secure memory (ROM) 1 15, a CD/ROM drive or the like 1 16, a GPS receiver module 120, and 
external and/or internal GPS antennas 121 and 123 that may be selectable by a switch 124. 
Power to the device may be externally applied using conventional means, coupled at 125, and/or 
be provided by an internal battery means 126. Transmitter/receiver 114 may be capable of 
communicating with a remotely located server via radio waves using antenna 127. The unit also 
includes a modem 130 and an RJII output 132 for connection to an external telephone line 
coupled to a communications medium such as the Internet. In addition, microprocessor 1 1 1 may 
be capable of communicating du-ectly via a cable network or the like through a serial port 134. 
The unit preferably includes a switch (135) for alternatively selecting between an included LCD 
display screen or the like 136, an SVHS output port 137 to which an external video monitor 
could be connected, or an RF modulator 138 and associated cable connector 139 that can be 
connected for input to particular channels of an external video monitor. 

In this embodiment, ROM 115 will be programmed to include the user's private key, the 
server's public key, an operating program for microprocessor 111, a public key/private key 
encr>'ption algorithm and an authentication algorithm. Games, catalogs or other data to be 
implemented in use of the unit can be loaded via CD/ROM drive 116. In order to enhance the 



11 



20 
- 25 



30 



WO 98/30297 

PCT/US98/00309 

security of the unit, it is preferable that Uoo^ .u 

H craoie tnat at least the components 111 1 15 and 1 9n u 
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be assured that all data and software ent^rJ. .u ■ "mt 121, it can 
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ROM loaded in t CD^Mr" T "^'''^ ^ 

mto me CD-ROM dnve and ihe remote user could communicate >^,l, ,1, 
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a- ""le internal modem is initialized; . 
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b. The GPS receiver is activated and starts collecting signals broadcast by 
available/visible satellites; 

c. The modem initiates dial-up connection to the server; and 

d. The application software and data (games, casino simulation, advertisements, 
5 etc.) are loaded into the remote unit from the CD ROM. In the preferred embodiment this 

software and data is authenticated using the method described in the referenced patent number 
no. 5,643,086. 

The initializing sequence is complete when the remote unit/server communications are 
established and initial data acquisition from the GPS is complete. Initial GPS data acquisition 
0 being complete means that there are sufficient satellites in view of the remote unit to determine 
the geo-position of the player .(i.e., the position of his remote unit). If either of these events does 
not complete and error conditions occur, an appropriate error message will be displayed to the 
player. 

The next series of events involves the exchanging of encrypted identifiers between the 
remote unit and the seiver to mutually authenticate the system. This insures knowledge of the 
identity of both the server and the remote unit and confirms that neither has been modified 
without authentication. If any part of the authentication process is unsuccessful, an appropriate 
error message is displayed to the player, the server will record whatever information it can, and 
the modem will discoimect the remote unit from the server. 
20 Once the remote unit, server and application software are initialized and authenticated, 

the player is prompted to enter his PIN number (or possibly a player identifier and PIN number). 
This player information is encrypted and sent to the server along with the player's encrypted 
signature. The server decrypts the received message and confirms that this player has a valid 
account and is authorized to use this particular remote unit. At this time the player can access 
25 many on-line casino fiinctions that do not involve gambling. 

In order to entitle the player to commence legal gaming, the agency (or agencies) having 
jurisdiction over the player and the casino must be established. Jurisdiction is established by 
determining the locations of the casino, the player and possibly the server. The location of the 
casino is known, and the location of the server is controlled by the casino. What must be 
specifically determined is the location of the player. Furthermore, for some applications, the 
exact time of a transaction, to an as yet to be established precision, must be known. For 
purposes of establishing jurisdiction, the geoposition of the player's remote unit is defined to be 
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the location of the player. The remote unit's location and the precise time is computed from 
GPS signals. The player's location is registered relative to jurisdictions allowing legal 
gambling, and he is allowed to proceed. If the player is not in a location where gambling is 
legal, he is notified in real time and the remote imit is disconnected from the server. 
5 Encryption is needed for authenticating transactions and insuring player privacy. The 

player selects his game and the play for processing by the remote unit. The play is typically 
comprised of the selection of the next move and the amount of the wager. In the remote unit, the 
play selection is combined with a game identifier; the player's PIN nimiber or other ID and the 
time the play was selected. Time is determined continuously from the GPS data. This data 

1 0 taken together forms the transaction request to the server. The remote luiit encodes the data and 
transmits it via the communication return path and its internal modem (or other return path as 
suggested above) to the server. 

Upon receipt of a complete transaction request, the server records the request and 
determines the transaction result. The result is the next state for the game (e.g., RNG output), 

1 5 and the effect of the transaction on the player's credit account. These data are then encrypted 
and returned to the players remote imit via the commimicating return path. Upon receipt of the 
return transmission, the remote unit decrypts and authenticates the communicated data, 
computes the display for the next state of the player's game, and presents the output of the play 
on a display screen. The remote unit is now ready to accept the player's next selection. 

20 When the player desires to terminate play, he powers off the imit. The server is aware 

when power is turned off at the remote unit because the connecting line or other medium "hangs 
up." This is the only indication needed to notify the server that the player is finished playing. 
The server at this time closes all open activities linked to the player's session. 
The critical elements of the system are thus the means for insuring: 

25 1 . That both the remote imit and server have not been tampered with; 

2. That the application software in the remote unit has not been tampered with; 

3. That the geophysical or geopolitical location of the player is legal; 

4. That the player is identified to at least a PIN number level of confidence; 

5. That the transactions are not tampered with while being transmitted to the server; 

30 and 

6. That each transaction is precisely time- tagged. 
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All of these elements are required for this application of the technology. It- will, of 
course, be appreciated that although the preceding is a description of a sequence of events 
defining the normal operation of the system, the exact sequence of events may change somewhat 
with an altemative implementation of the invention. 

Fig. 8 depicts an operational time line for communication between a remote player unit 
(client) and a casino system (server). 

Fig. 9 suggests in topical format the nature of the screens that might be presented to the 
player during game play using the remote player unit. 

Although the present invention has been described above in terms of several specific 
embodiments, it is anticipated that alterations and modifications thereof will no doubt become 
apparent to those skilled in the art. It is therefore intended that the- following claims be 
interpreted as covering all such alterations and modifications as fall within the time, spirit and 
scope of the invention. 

What is claimed is: r 
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processed by said microprocessor, develops electronic data for driving a display means that 
generates graphical images depicting game play. 

3. An electronic gaming system as recited in claim 2 and further comprising read only 
memory (ROM) means for storing said operating system software and encryption software for 
execution by said microprocessor to implement said first encryption means. 

4. An electronic gaming system as recited in claim 3 wherein said terminal apparatus 
ftirther includes authentication means for authenticating software to be executed by said 
microprocessor. 

5. An electronic gaming system as recited in claim 1 wherein said player identifier data 
corresponds to a unique personal identification number (PIN) assigned to a particular player. 

6. An electronic gaming system as recited in claim 1 wherein said electronic locating means 
includes a radio navigation means responsive to input signals broadcast ft-om multiple 
geostationary transmitting sources and operative to calculate position coordinates constituting 
said location data. 

7. An electronic gaming system as recited in claim 6 wherein said game playing means 
includes a microprocessor, operating system software, and game software which, when 
processed by said microprocessor, develops electronic data for driving a display means that 
generates graphical images depicting game play. 

8. An electronic gaming system as recited in claim 7 and further comprising read only 
memory (ROM) means for storing said operating system software and encryption software for 
execution by said microprocessor to implement said first encryption means. 

9. An electronic gaming system as recited in claim 8 wherein said terminal apparatus 
ftuther includes authentication means for authenticating ail software executed by said 
microprocessor. 
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10. .\n electronic gaming system as recited in claim 6 wherein said radio navigatioiKmeans is 
a global positioning satellite (GPS) locating system. 

11. An electronic gaming system as recited in claim I wherein said first encryption means 
and said second encryption means are remotely disposed components, implementing a public- 
key/private-key crypto system. 

12. An electronic gaming system as recited in claim 1 1 wherein said first and second 
communication means include modems for transmitting and receiving said encoded data to and 
from said communications medium via telephone lines. 

13. An electronic gaming system as recited in claim 12 wherein said communications 
medium includes the Internet. 

14. An electronic gaming system as recited in claim 4 wherein said first encryption means 
and said second encryption means implement a public-key/private-key crypto system to encode 
and decode data commxmicated between said player terminal apparatus and said host server 
means. 

15. An electronic gaming system as recited in claim 14 wherein said electronic locating 
means includes a radio navigation means responsive to input signals broadcast by multiple 
geostationary transmitting sources and operation to calculate position coordinates constituting 
said location data. 

16. "-«An electronic gaming system as recited in claim 15 wherein said host server means 
further includes an electronic locating means for generating location data indicating the location 
of said host server means and for generating time data evidencing universal time for 
synchronizing with said player terminal apparatus, and wherein the location data is 
communicated to said player terminal apparatus to confirm receipt of wager data. 

17. An electronic gaming system as recited in claim 1 wherein said host server means fixrther 
includes a remote user public-key library containing public-key of authorized players for use in 
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encoding and decoding data communicated between said player terminal apparatus and said host 
server means. 

18. An electronic gaming system as recited in claim 1 7 wherein said player terminal 
apparatus ftirther includes CD ROM means for containing gaming software to be executed by 
said microprocessor means to develop gaming signals for driving said display screen to present a 
graphical description of the game to a player. 

1 9. An electronic gaming system as recited in claim 1 8 wherein said terminal apparatus 
further includes authentication means for authenticating software to be executed by said 
microprocessor. 

20. An electronic gaming system as recited in claim 13 wherein said electronic locating 
means includes a radio navigation means responsive to input signals broadcast from multiple 
geostationary transmitting sources and operative to calculate position coordinates constituting 
said location data. 

21. An electronic gaining terminal for disposition at a location remote from a host server and 
for communicating with the host server in a secured transactional mode, over an unsecured 
communications medium, informing the host server as to the location of the gaming terminal so 
that the host server can permit or deny game play by the player based in part on predetermined 
geopolitical or geographical restrictions, comprising: 

electronic game playing means for enabling a player to enter player identification 
^ data, to make a wager by inputting wager data, to commence game play by causing a 
start play signal to be generated, and for receiving an indication of game play results in 
the form of a response signal; 

electronic locating means for generating location data indicating the present 
location of said gaming terminal and for generating time data evidencing universal time; 

encryption means for encoding said player identification data, said wager data, 
said location data and said time data, and for decoding a response signal; and 

communication means responsive to said start play signal and operative to 
transmit the encoded data to a host server via a commimications medium. 
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22. An electronic gaming terminal as recited in claim 21 wherein said game playing means 
includes a microprocessor, operating software, and game software which, when processed by 
said microprocessor, develops electronic data for driving a display means that generates 
graphical images depicting game play. 

23. An electronic gaming terminal as recited in claim 22 and ftirther comprising read only 
memory (ROM) means for storing said operating system software, and encryption software for 
execution by said microprocessor to implement said first encryption means. 

24. ^An electronic gaming terminal as recited in claim 23 and ftirther comprising 
authentication means for authenticating all software executed by said microprocessor. 

25. An electronic gaming terminal as recited in claim 24 wherein said player identification 
data corresponds to a unique personal identification number (PIN) assigned to a particular 
player. 

26. An electronic gaming terminal as recited in claim 24 wherein said electronic locating 
means includes a radio navigation means responsive to input signals broadcast from multiple 
geostationary transmitting sources and operative to calculate position coordinates constituting 
said location data. 

27. An electronic gaming terminal system as recited in claim 21 wherein said game playing 
means -includes a microprocessor, operating software, and game software which, when processed 
by said-microprocessor, develops electronic data for driving a display means that generates 
graphical images depicting game play. 

28. An electronic gaming system as recited in claim 27 and ftirther comprising read only 
(ROM) means for storing said operating system software and encryption software for execution 
by said microprocessor to implement said first encryption means. 

29. An electronic gaming terminal as recited in claim 26 wherein said radio navigation 
means is a global positioning satellite (GPS) locating system. 
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30. An electronic gaming terminal as recited in claim 28 wherein said encryption means is a 
public-key/private-key crypto system. 

31. An electronic gaming terminal as recited in claim 2 1 wherein said communication means 
includes a modem for transmitting and receiving said encoded data to and from said 
communications medium via a telephone line. 

32. An electronic gaming apparatus as recited in claim 3 1 wherein said communications 
medium includes the Internet. 



33. An electronic gaming terminal as recited in claim 32 wherein said game player means 
includes microprocessor means, and further comprising CD ROM means for containing gaming 
software to be executed by said microprocessor means to develop gaming signals for driving a 
display screen to present a graphical depiction of the game to a player. 

34, An electronic terminal for disposition at a location remote from a host server and for 
commxmicating with the host server in a secured transactional mode over an unsecured 
communications medium informing the host server as to the location of the terminal so that the 
host server can permit or deny remote user access to the host server via said terminal based at 
least in part on predetermined geopolitical or geographical restrictions, comprising: 

electronic transaction entry means for enabling a user to enter user identification 
data, to enter transactional data, to commence u-ansactional communication by causing a 
start signal to be generated, and for receiving an indication of completion of the 
transaction in the form of a response signal; 

electronic locating means for generating location data indicating the present 
location of said terminal and for generating time data evidencing imiversal time; 

encryption means for encoding said user identification data, said transactional 
data, said location data and said time data; and 

communication means responsive to said start signal and operative to transmit the 
encoded data to a communications medium for conununication to a host server. 
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35. A gaming method for enabling one or more players, disposed at locations remotcfrom a 
gambling casino, to communicate over on unsecured communications medium with the casino in 
a secured transactional mode wherein the casino is informed as to the location of the player 
temimals so that it can pemiit or deny game play based in part on geopolitical or geographical 
restrictions, comprising the steps: 

generating player identification data; 

generating wager data; 

generating location data indicating the present location of said player; 
generating universal time data; 

encoding said player identification data, said wager data, said location data and said time 

data; 

transmitting the encoded data to the casino through a communications medium; and 
receiving the encoded data at said casino; 
decoding the transmitted encoded data and 

using the decoded identification data, wager data, location data and time data to 
determine the eligibility of the player, and if the player is qualified, generating a response 
notifying the player that he may commence game play. 

36. A gaming method as recited in claim 35 and further comprising the steps of: 

commencing game play by extracting graphics data from a storage medium and sending 
a notice of play commencement to the casino; 

using the extracted graphics data to generate graphical images of the game play for 

display to the player; 

using random number generating means at the casino to generate a game result and 
forwarding the said game result to the player; and 

using the forwarded result to indicate to the player the result of his wager. 

37. A gaming method as recited in claim 36 wherein said location data is obtained by 
accessing radio signals transmitted by geostationary navigational transmitters, and by using 
the radio signals to compute player position coordinate information corresponding to said 
location data. 
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38. A gaming method as recited in claim 37 wherein said time data is also obtained by 
accessing said geostationary transmitters. 

39. A gaming method as recited in claim 38 wherein said identification data, said wager data, 
said location data and said time data are encoded using a public-key/private-key crypto system. 

40. A gaming method as recited in claim 36 and further comprising the steps of: 
opening a player account with the casino prior to commencing game play; and 
following each generation of a game result, crediting the player account in the event of a 

positive result, and debiting the player account in the event of a negative result. 
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